CVE-2019-19283

A vulnerability has been identified in XHQ All Versions 6.1. The application's web server could expose non-sensitive information about the server's architecture. This could allow an attacker to adapt further attacks to the version in place...

Design/Logic Flaw

A vulnerability has been identified in XHQ All Versions 6.1. The application's web server could expose non-sensitive information about the server's architecture. This could allow an attacker to adapt further attacks to the version in place...

CVE-2019-19283

A vulnerability has been identified in XHQ All Versions 6.1. The application's web server could expose non-sensitive information about the server's architecture. This could allow an attacker to adapt further attacks to the version in place...

kernel: net: bluetooth: type confusion while processing AMP packets

A flaw was found in the way the Linux kernel’s Bluetooth implementation handled L2CAP Logical Link Control and Adaptation Protocol packets with A2MP Alternate MAC-PHY Manager Protocol CID Channel Identifier. This flaw allows a remote attacker in an adjacent range to crash the system, causing a...

kernel: net: bluetooth: type confusion while processing AMP packets

A flaw was found in the way the Linux kernel’s Bluetooth implementation handled L2CAP Logical Link Control and Adaptation Protocol packets with A2MP Alternate MAC-PHY Manager Protocol CID Channel Identifier. This flaw allows a remote attacker in an adjacent range to crash the system, causing a...

kernel: net: bluetooth: type confusion while processing AMP packets

A flaw was found in the way the Linux kernel’s Bluetooth implementation handled L2CAP Logical Link Control and Adaptation Protocol packets with A2MP Alternate MAC-PHY Manager Protocol CID Channel Identifier. This flaw allows a remote attacker in an adjacent range to crash the system, causing a...

kernel: Heap address information leak while using L2CAP_GET_CONF_OPT

A flaw was found in the Linux kernel's implementation of Logical Link Control and Adaptation Protocol L2CAP, part of the Bluetooth stack. An attacker, within the range of standard Bluetooth transmissions, can create and send a specially crafted packet. The response to this specially crafted packe...

kernel: Heap address information leak while using L2CAP_GET_CONF_OPT

A flaw was found in the Linux kernel's implementation of Logical Link Control and Adaptation Protocol L2CAP, part of the Bluetooth stack. An attacker, within the range of standard Bluetooth transmissions, can create and send a specially crafted packet. The response to this specially crafted packe...

Arbitrary File Read Vulnerability in SAP EAP Enterprise Adaptation Management Platform

EAP Enterprise Adaptive Management Platform is an enterprise management software designed by Sap for the complexity and diversity of real estate enterprise management in China. EAP Enterprise Adaptation Management Platform has an arbitrary file reading vulnerability, which can be exploited by...

Stack overflow vulnerability in GPAC gf_m2ts_get_adaptation_field function

GPAC is an open source multimedia framework. A stack overflow vulnerability exists in the GPAC gfm2tsgetadaptationfield function, which can be exploited by an attacker to cause a denial of service...

The Air Force Wants to Give You Its Credit Card

Will Roper, acquisition executive for the US Air Force, talks to WIRED's editor in chief about making the military more adaptive, the role of AI, and what he worries about every day...

Linux kernel information disclosure vulnerability (CNVD-2019-38529)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel's implementation of the Logical Link Control and Adaptation Protocol. The vulnerability can be exploited by an...

Linux kernel information disclosure vulnerability (CNVD-2019-01672)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in the Linux kernel's implementation of the Logical Link Control and Adaptation Protocol, which can be exploited to...

glibc - getcwd() Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits / This software is provided by the copyright owner "as is" and any expressed or implied warranties, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall...

UBUNTU-CVE-2017-1000251

The native Bluetooth stack in the Linux Kernel BlueZ, starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space...

Satoshi Bomb

Let us discuss what defines the profitability of bitcoin mining, what principles for mining speed adaptation were initially embedded into it, and why these principles can lead to the failure of the cryptocurrency in the long run. We assume that the reader has an idea of basic Bitcoin mechanics su...

Microsoft's Private Windows 10 Internal Builds and Partial Source Code Leaked Online

A massive archive of Microsoft's top-secret Windows 10 builds, and the source codes for private software has been reportedly leaked online, which could lead to a nasty wave of Windows 10 exploits, journalist at the Reg claims. The Leaked files – uploaded on BetaArchive website – contains more tha...

[SECURITY] Fedora 22 Update: libecap-1.0.0-1.fc22

eCAP is a software interface that allows a network application, such as an HTTP proxy or an ICAP server, to outsource content analysis and adaptation to a loadable module. For each applicable protocol message being processed, an eCAP-enabled host application supplies the message details to the...

Not So Fast! Boyd OODA Looping Is More Than Speed

The name "John Boyd" and the term "OODA Loop" are probably familiar to many of the readers of this blog. I've mentioned one or the other in 2006, 2007, 2009 twice, and 2014. Boyd was a fighter pilot in the Korean war and revolutionized thinking on topics like fighter design and military strategy...

Christofer Hoff on Mixed Martial Arts, Active Defense, and Security

CANCUN–In his keynote talk at the Kaspersky Security Analyst Summit Monday Christofer Hoff, the vice president and CTO of the security business at Juniper Networks stressed that in security and martial arts alike, it’s hard to be a skilled defender if you don’t understand how your adversaries pul...